API tools faq
paste
Advertisement
amccloud

CSR326

amccloud
Apr 13th, 2024 (edited)
5
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.61 KB | None | 0 0
raw download clone embed print report
  1. # 2024-04-13 22:24:03 by RouterOS 7.14.2
  2. # software id = 32V9-BHNT
  3. #
  4. # model = CRS326-24G-2S+
  5. # serial number = HCR08CG6ZB3
  6. /interface bridge
  7. add name=bridge port-cost-mode=short
  8. add ingress-filtering=no name=vlan_bridge port-cost-mode=short pvid=100 \
  9. vlan-filtering=yes
  10. /interface ethernet
  11. set [ find default-name=ether8 ] rx-flow-control=auto tx-flow-control=auto
  12. set [ find default-name=ether12 ] rx-flow-control=auto tx-flow-control=auto
  13. set [ find default-name=ether22 ] name=ether22-trunk
  14. set [ find default-name=ether24 ] comment=CCR2004 name=ether24-trunk \
  15. rx-flow-control=auto tx-flow-control=auto
  16. set [ find default-name=sfp-sfpplus1 ] rx-flow-control=auto sfp-rate-select=\
  17. low tx-flow-control=auto
  18. /interface vlan
  19. add interface=vlan_bridge name=vlan10-main vlan-id=10
  20. add interface=vlan_bridge name=vlan20-iot vlan-id=20
  21. add interface=vlan_bridge name=vlan30-guest vlan-id=30
  22. add interface=vlan_bridge name=vlan100-mgmt vlan-id=100
  23. /interface list
  24. add name=LAN
  25. add name=VLAN_mgmt
  26. add name=VLAN_main
  27. add name=VLAN_iot
  28. add name=VLAN_guest
  29. add name=trunks
  30. add name=WAN
  31. /interface wireless security-profiles
  32. set [ find default=yes ] supplicant-identity=MikroTik
  33. /ip hotspot profile
  34. set [ find default=yes ] html-directory=hotspot
  35. /ip smb users
  36. set [ find default=yes ] disabled=yes
  37. /port
  38. set 0 name=serial0
  39. /user group
  40. add name=homeassistant policy="reboot,read,write,policy,test,api,!local,!telne\
  41. t,!ssh,!ftp,!winbox,!password,!web,!sniff,!sensitive,!romon,!rest-api"
  42. add name=dude policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbo\
  43. x,password,web,sniff,sensitive,api,romon,rest-api"
  44. /caps-man manager
  45. set enabled=yes
  46. /interface bridge port
  47. add bridge=vlan_bridge interface=VLAN_mgmt internal-path-cost=10 path-cost=10 \
  48. pvid=100
  49. add bridge=vlan_bridge interface=VLAN_main internal-path-cost=10 path-cost=10 \
  50. pvid=10
  51. add bridge=vlan_bridge interface=VLAN_iot internal-path-cost=10 path-cost=10 \
  52. pvid=20
  53. add bridge=vlan_bridge interface=VLAN_guest internal-path-cost=10 path-cost=\
  54. 10 pvid=30
  55. add bridge=vlan_bridge frame-types=admit-only-vlan-tagged interface=trunks \
  56. internal-path-cost=10 path-cost=10 pvid=100
  57. add bridge=bridge interface=LAN internal-path-cost=10 path-cost=10
  58. add bridge=vlan_bridge ingress-filtering=no interface=WAN pvid=100
  59. /ip firewall connection tracking
  60. set udp-timeout=10s
  61. /ip neighbor discovery-settings
  62. set discover-interface-list=all lldp-med-net-policy-vlan=100
  63. /interface bridge vlan
  64. add bridge=vlan_bridge tagged=vlan_bridge,sfp-sfpplus1,ether17 untagged=\
  65. ether1,ether5 vlan-ids=100
  66. add bridge=vlan_bridge tagged=vlan_bridge,sfp-sfpplus1,ether17 untagged=\
  67. ether1 vlan-ids=10
  68. add bridge=vlan_bridge tagged=vlan_bridge,sfp-sfpplus1,ether17 untagged=\
  69. ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether1 \
  70. vlan-ids=20
  71. add bridge=vlan_bridge tagged=vlan_bridge,sfp-sfpplus1,ether17 untagged=\
  72. ether1 vlan-ids=30
  73. /interface list member
  74. add interface=ether1 list=WAN
  75. add interface=ether2 list=VLAN_mgmt
  76. add interface=ether3 list=VLAN_mgmt
  77. add interface=ether4 list=VLAN_mgmt
  78. add interface=ether5 list=VLAN_mgmt
  79. add interface=ether7 list=VLAN_mgmt
  80. add interface=ether8 list=VLAN_mgmt
  81. add interface=ether9 list=VLAN_iot
  82. add interface=ether11 list=VLAN_iot
  83. add interface=ether12 list=VLAN_iot
  84. add interface=ether13 list=VLAN_iot
  85. add interface=ether14 list=VLAN_iot
  86. add interface=ether15 list=VLAN_iot
  87. add interface=ether16 list=VLAN_iot
  88. add interface=ether17 list=trunks
  89. add interface=ether18 list=LAN
  90. add interface=ether19 list=LAN
  91. add interface=ether20 list=LAN
  92. add interface=ether21 list=LAN
  93. add interface=ether23 list=LAN
  94. add interface=ether6 list=VLAN_mgmt
  95. add interface=ether22-trunk list=trunks
  96. add interface=ether24-trunk list=trunks
  97. add interface=*27 list=trunks
  98. add interface=ether10 list=VLAN_iot
  99. add interface=sfp-sfpplus1 list=trunks
  100. /interface wifi cap
  101. set discovery-interfaces=all enabled=yes
  102. /ip dhcp-client
  103. add interface=vlan100-mgmt
  104. /ip firewall nat
  105. add action=masquerade chain=srcnat disabled=yes
  106. /ip smb shares
  107. set [ find default=yes ] directory=/flash/pub
  108. /snmp
  109. set enabled=yes trap-version=2
  110. /system clock
  111. set time-zone-name=Europe/Warsaw
  112. /system identity
  113. set name=CRS326
  114. /system note
  115. set show-at-login=no
  116. /system routerboard settings
  117. set boot-os=router-os
  118. /system swos
  119. set address-acquisition-mode=dhcp-only allow-from-ports="p1,p2,p3,p4,p5,p6,p7,\
  120. p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23,p24,p25,p26,\
  121. p27,p28,p29,p30,p31"
  122. /tool bandwidth-server
  123. set authenticate=no
  124. /tool sniffer
  125. set filter-interface=ether12
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!